PT-2026-42181 · Progress · Moveit Automation

Airbus Seclab + 4 · Published 2026-05-20 · Updated 2026-05-21 · CVE-2026-8485

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MOVEit Automation versions prior to 2025.0.11 MOVEit Automation versions 2025.1.0 through 2025.1.6

Description An uncontrolled memory allocation issue in Progress Software MOVEit Automation allows for excessive allocation. Uncontrolled memory allocation occurs when a program allocates more memory than is available or necessary, which can lead to system instability or crashes.

Recommendations Update versions prior to 2025.0.11 to version 2025.0.11 or newer. Update versions 2025.1.0 through 2025.1.6 to version 2025.1.7 or newer.

Fix

Weakness Enumeration

CWE-789

Related Identifiers

CVE-2026-8485

Affected Products

Moveit Automation

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-8485 · Security Note
• https://docs.progress.com/bundle/moveit-automation-release-notes-2026/page/Fixed-Issues-2026.html · Vendor Advisory
• https://t.me/CVEtracker/54403 · Telegram Post
• https://twitter.com/autumn_good_35/status/2057485289820668301 · Twitter Post